Nessus has a family of plugins – about 308 pages of them – that can be used to perform scans on SCADA/ICS devices. You can browse the family of plugins here: https://www.tenable.com/plugins/nessus/families/SCADA . These plugins are checked against the given device to identify any vulnerability that has been identified based on the signatures present in the plugin.